===================================================== BUG: KMSAN: use-after-free in obj_malloc+0x600/0x690 mm/zsmalloc.c:1296 obj_malloc+0x600/0x690 mm/zsmalloc.c:1296 zs_malloc+0xcde/0x1250 mm/zsmalloc.c:1353 zs_zpool_malloc+0x44/0x130 mm/zsmalloc.c:366 zpool_malloc+0x85/0xb0 mm/zpool.c:258 zswap_compress+0x6b4/0xb10 mm/zswap.c:1049 zswap_store+0x2180/0x2ca0 mm/zswap.c:1580 swap_writepage+0x126/0x4c0 mm/page_io.c:198 shmem_writepage+0x1826/0x1f70 mm/shmem.c:1518 pageout mm/vmscan.c:660 [inline] shrink_folio_list+0x4a55/0x7910 mm/vmscan.c:1323 evict_folios+0x9d7f/0xcc20 mm/vmscan.c:4537 try_to_shrink_lruvec+0x160e/0x1a50 mm/vmscan.c:4733 shrink_one+0x66f/0xd40 mm/vmscan.c:4772 shrink_many mm/vmscan.c:4835 [inline] lru_gen_shrink_node mm/vmscan.c:4935 [inline] shrink_node+0x4856/0x55f0 mm/vmscan.c:5894 kswapd_shrink_node mm/vmscan.c:6704 [inline] balance_pgdat mm/vmscan.c:6895 [inline] kswapd+0x1eba/0x4460 mm/vmscan.c:7164 kthread+0x3e2/0x540 kernel/kthread.c:388 ret_from_fork+0x6d/0x90 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Uninit was stored to memory at: set_freeobj mm/zsmalloc.c:470 [inline] obj_malloc+0x630/0x690 mm/zsmalloc.c:1301 zs_malloc+0xcde/0x1250 mm/zsmalloc.c:1353 zs_zpool_malloc+0x44/0x130 mm/zsmalloc.c:366 zpool_malloc+0x85/0xb0 mm/zpool.c:258 zswap_compress+0x6b4/0xb10 mm/zswap.c:1049 zswap_store+0x2180/0x2ca0 mm/zswap.c:1580 swap_writepage+0x126/0x4c0 mm/page_io.c:198 shmem_writepage+0x1826/0x1f70 mm/shmem.c:1518 pageout mm/vmscan.c:660 [inline] shrink_folio_list+0x4a55/0x7910 mm/vmscan.c:1323 evict_folios+0x9d7f/0xcc20 mm/vmscan.c:4537 try_to_shrink_lruvec+0x160e/0x1a50 mm/vmscan.c:4733 shrink_one+0x66f/0xd40 mm/vmscan.c:4772 shrink_many mm/vmscan.c:4835 [inline] lru_gen_shrink_node mm/vmscan.c:4935 [inline] shrink_node+0x4856/0x55f0 mm/vmscan.c:5894 kswapd_shrink_node mm/vmscan.c:6704 [inline] balance_pgdat mm/vmscan.c:6895 [inline] kswapd+0x1eba/0x4460 mm/vmscan.c:7164 kthread+0x3e2/0x540 kernel/kthread.c:388 ret_from_fork+0x6d/0x90 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Uninit was created at: free_pages_prepare mm/page_alloc.c:1095 [inline] free_unref_page_prepare+0xc1/0xad0 mm/page_alloc.c:2347 free_unref_folios+0x23f/0x1340 mm/page_alloc.c:2536 shrink_folio_list+0x58da/0x7910 mm/vmscan.c:1428 evict_folios+0x9d7f/0xcc20 mm/vmscan.c:4537 try_to_shrink_lruvec+0x160e/0x1a50 mm/vmscan.c:4733 shrink_one+0x66f/0xd40 mm/vmscan.c:4772 shrink_many mm/vmscan.c:4835 [inline] lru_gen_shrink_node mm/vmscan.c:4935 [inline] shrink_node+0x4856/0x55f0 mm/vmscan.c:5894 shrink_zones mm/vmscan.c:6152 [inline] do_try_to_free_pages+0x820/0x2570 mm/vmscan.c:6214 try_to_free_pages+0xb7b/0x1820 mm/vmscan.c:6449 __perform_reclaim mm/page_alloc.c:3774 [inline] __alloc_pages_direct_reclaim mm/page_alloc.c:3796 [inline] __alloc_pages_slowpath+0x1035/0x31a0 mm/page_alloc.c:4202 __alloc_pages+0xacf/0xe70 mm/page_alloc.c:4588 alloc_pages_mpol+0x299/0x990 mm/mempolicy.c:2264 alloc_pages+0x1bf/0x1e0 mm/mempolicy.c:2335 pagetable_alloc include/linux/mm.h:2864 [inline] __pte_alloc_one include/asm-generic/pgalloc.h:68 [inline] pte_alloc_one+0x5c/0x350 arch/x86/mm/pgtable.c:33 __pte_alloc+0x3d/0x670 mm/memory.c:440 copy_pte_range mm/memory.c:1092 [inline] copy_pmd_range mm/memory.c:1238 [inline] copy_pud_range mm/memory.c:1275 [inline] copy_p4d_range mm/memory.c:1299 [inline] copy_page_range+0x92a9/0xa480 mm/memory.c:1397 dup_mmap kernel/fork.c:751 [inline] dup_mm kernel/fork.c:1688 [inline] copy_mm+0x24f0/0x39d0 kernel/fork.c:1737 copy_process+0x26f7/0x5b90 kernel/fork.c:2390 kernel_clone+0x401/0x1040 kernel/fork.c:2797 __do_sys_clone kernel/fork.c:2940 [inline] __se_sys_clone kernel/fork.c:2924 [inline] __x64_sys_clone+0x25c/0x360 kernel/fork.c:2924 x64_sys_call+0x2a14/0x3b50 arch/x86/include/generated/asm/syscalls_64.h:57 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f CPU: 0 PID: 79 Comm: kswapd0 Not tainted 6.9.0-rc7-syzkaller-00183-gcf87f46fd34d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 =====================================================